Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/3230302e31302e33322e302f32302d3230203d3e20323634383530.roa
File:                     3230302e31302e33322e302f32302d3230203d3e20323634383530.roa (raw, json)
Hash identifier:          RWRVBQKoSlOOhvfKMjj006fM7obNefQ7I+un6FzNz80=
Subject key identifier:   78:8C:C6:B8:B4:8B:54:32:E2:F5:3E:15:42:74:26:DA:F9:A4:FE:B6
Certificate issuer:       /CN=FA7A92609CADE6A78C1E178DEFE7C9C24CF75169
Certificate serial:       73E1C12D697A0E70E9CDE4DD8E551B1CAF902A48
Authority key identifier: FA:7A:92:60:9C:AD:E6:A7:8C:1E:17:8D:EF:E7:C9:C2:4C:F7:51:69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/3230302e31302e33322e302f32302d3230203d3e20323634383530.roa
Signing time:             Tue 05 Mar 2024 17:59:10 +0000
ROA not before:           Tue 05 Mar 2024 17:54:10 +0000
ROA not after:            Tue 04 Mar 2025 17:59:10 +0000
asID:                     264850
IP address blocks:        200.10.32.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.crl
                          rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Sun 24 Nov 2024 23:17:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:e1:c1:2d:69:7a:0e:70:e9:cd:e4:dd:8e:55:1b:1c:af:90:2a:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA7A92609CADE6A78C1E178DEFE7C9C24CF75169
        Validity
            Not Before: Mar  5 17:54:10 2024 GMT
            Not After : Mar  4 17:59:10 2025 GMT
        Subject: CN=788CC6B8B48B5432E2F53E15427426DAF9A4FEB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9f:78:09:07:52:73:f5:65:3e:97:b9:2e:ef:
                    fd:8d:8e:9a:49:a5:e0:8a:84:a3:2b:cf:9a:02:fe:
                    1a:a3:82:ca:16:b8:fd:29:13:b1:57:ce:7d:7a:26:
                    9d:74:ed:3b:54:1b:1f:54:b1:65:76:28:39:bc:84:
                    2b:6b:d7:74:31:95:1c:f9:17:26:d8:52:ac:5d:e3:
                    4d:65:05:92:5c:0b:da:7e:1d:9d:a3:f0:10:1c:07:
                    0f:c3:9d:51:fb:4b:9c:35:ad:51:71:e8:9f:f0:af:
                    ee:a1:35:f2:2a:de:85:e3:1b:de:ea:22:43:a3:ab:
                    1f:dc:91:38:47:9b:6d:42:1e:cf:20:41:a3:68:9a:
                    0b:20:a6:cb:fa:c3:fe:c5:bd:28:d7:d8:d3:c6:1b:
                    9a:85:65:a3:d1:5c:01:75:65:95:09:c5:91:dc:24:
                    50:b6:34:be:c2:4a:ca:64:76:9d:27:39:95:98:80:
                    73:14:a4:b8:22:76:54:28:c2:3d:6f:f1:b0:e6:d4:
                    72:11:a7:8c:d1:16:29:06:b4:dc:ff:de:22:09:85:
                    91:39:10:ee:95:05:3f:56:a8:9a:b7:74:78:aa:2f:
                    a6:a7:70:38:e4:1c:99:58:a0:3c:74:60:96:0c:6f:
                    f4:ee:f4:3a:e7:66:71:34:d6:3a:9b:88:c1:9e:e7:
                    b3:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:8C:C6:B8:B4:8B:54:32:E2:F5:3E:15:42:74:26:DA:F9:A4:FE:B6
            X509v3 Authority Key Identifier:
                keyid:FA:7A:92:60:9C:AD:E6:A7:8C:1E:17:8D:EF:E7:C9:C2:4C:F7:51:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FA7A92609CADE6A78C1E178DEFE7C9C24CF75169.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/59F0FD8273BD179246780F8BF2D7DB0AE56FE33EEE020D07550D60E23FD01F2E/0/3230302e31302e33322e302f32302d3230203d3e20323634383530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         03:c8:4b:65:67:96:36:57:4f:ef:28:69:0f:7b:57:bf:40:7a:
         1b:01:db:e6:3c:b5:b3:85:d3:ad:70:15:ec:85:da:46:01:f2:
         58:b9:89:e0:f6:f9:35:e7:9d:bf:38:21:be:49:0c:58:18:32:
         57:60:1e:23:3c:80:50:a2:db:7d:68:f9:33:25:6d:04:a0:37:
         de:6b:5e:86:a5:14:37:b5:80:2e:b9:3b:dc:e5:d9:27:b7:f4:
         ee:11:d4:a5:02:9b:fc:76:1c:a1:7d:4a:ab:51:b3:fb:ec:39:
         18:7c:3a:81:cd:fc:fd:ee:fd:f1:5e:e5:e8:46:c1:fc:d8:83:
         73:4a:09:d7:73:15:40:44:d5:7b:3f:c6:80:c8:fd:cf:1c:b8:
         6f:f8:cf:d4:2c:ec:ad:ee:2f:80:18:c8:dc:30:94:6a:6e:01:
         54:c0:73:f2:c5:0e:78:de:ed:f9:15:71:a3:43:58:80:39:fb:
         bf:a4:10:71:90:ef:58:ba:ff:87:89:bb:b6:ff:09:a9:01:da:
         31:3b:05:ec:f4:d5:bb:1a:8c:00:ac:50:09:28:4c:eb:65:b1:
         73:21:95:ae:9b:1a:dc:b0:90:50:8c:64:99:11:f1:c1:96:83:
         79:d7:ae:20:80:8d:dc:62:4f:ba:0b:72:48:bc:0a:0a:7d:91:
         fc:82:54:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:29:58 2024 by rpki-client on console-fra.rpki-client.org